Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File:                     4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier:          T4CxK5ffOw1cROrOvYHRvfuTxfqeKvWTRAP+U8SAnO8=
Subject key identifier:   2F:95:0B:68:7E:6E:8E:B4:D3:4C:65:C0:7D:63:8C:09:8F:8B:72:30
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F43285849C20A1163C5FACC600BD0AA80
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     46489
IP address blocks:        23.160.0.0/24 maxlen: 24
                          99.181.64.0/18 maxlen: 24
                          192.16.64.0/21 maxlen: 24
                          192.108.239.0/24 maxlen: 24
                          199.9.248.0/21 maxlen: 24
                          2620:f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:11:63:c5:fa:cc:60:0b:d0:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b3ba125c-3835-47a2-86e7-ae040ae2d37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:40:f7:f6:fd:64:0e:89:de:2d:3d:a4:b5:
                    bd:e2:f6:0c:92:72:7a:16:1d:77:52:86:58:e2:94:
                    d5:e0:a3:11:36:b7:02:c5:7a:a0:13:9d:30:f6:61:
                    b1:47:64:91:c4:38:b7:87:f8:91:0f:21:4f:cb:23:
                    c1:98:85:19:61:a1:ae:e2:d2:c4:16:f6:ea:7c:f9:
                    08:51:73:83:6e:2c:7c:ce:50:6e:b0:e2:ee:23:7c:
                    9d:ab:70:5e:66:42:d8:48:d7:b4:b6:03:d5:e8:fd:
                    89:c7:c3:41:b6:ea:e6:3b:29:10:a5:1f:15:9a:06:
                    29:1c:6f:0f:30:78:bb:5c:0f:40:f4:62:2e:1c:32:
                    5a:17:f5:0a:db:ae:ca:3e:16:b7:73:38:f4:69:0d:
                    e1:ea:f6:39:46:b8:88:73:1b:ef:b1:02:2a:a4:9a:
                    97:c1:1e:79:99:56:d7:53:d5:05:c2:a8:65:63:9f:
                    ab:8b:1e:74:80:10:46:b6:ff:29:63:52:f1:30:cb:
                    0e:7b:7f:21:c9:11:21:80:80:84:62:fe:59:68:93:
                    e4:27:6c:fc:f7:6c:a9:cf:b6:a5:5a:b4:93:b6:12:
                    6b:cd:6d:8b:7e:d7:43:12:2f:3a:61:33:3f:a9:1f:
                    8d:c6:50:ea:63:9b:3c:5c:75:f7:45:3e:49:b1:8b:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:0B:68:7E:6E:8E:B4:D3:4C:65:C0:7D:63:8C:09:8F:8B:72:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.0.0/24
                  99.181.64.0/18
                  192.16.64.0/21
                  192.108.239.0/24
                  199.9.248.0/21
                IPv6:
                  2620:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:f9:8c:9c:7d:81:e8:11:88:e2:4f:00:21:54:9c:ef:da:
         cf:dd:c9:50:fb:b3:52:d2:92:38:08:99:49:43:fb:2a:ce:f6:
         df:c4:4f:a9:e9:e5:dd:19:90:81:48:30:59:ac:3d:60:7c:79:
         73:32:e2:02:d0:b1:52:2e:62:3a:9b:ad:8e:b6:90:c7:b0:52:
         d5:63:80:27:76:43:0b:5a:0b:04:b2:4c:38:4d:14:af:fa:89:
         3e:23:10:2c:33:fd:ac:28:83:50:ca:de:c1:c1:cf:ce:72:de:
         4d:52:79:38:60:ba:ef:32:46:53:f9:3f:1c:af:43:4b:91:ce:
         fd:88:bb:f3:e0:13:18:e5:c5:26:d5:c6:65:ea:1c:4d:d5:59:
         b9:65:eb:f9:c9:2a:8f:cd:0e:b1:fc:6f:43:37:56:5f:d1:ae:
         89:d0:1c:49:a2:ad:64:19:01:a1:78:f7:93:fb:c0:85:c7:a1:
         71:40:73:ad:19:d5:98:24:fd:e3:c7:0e:0d:08:64:af:90:b3:
         e8:8a:01:3a:f3:64:0d:f0:0c:2a:53:ac:07:4a:77:53:be:38:
         20:a8:26:2d:ff:31:17:9a:b3:08:87:bf:3f:aa:9c:0b:22:ed:
         b9:b4:f0:0e:ca:2b:85:65:58:5c:1c:48:9f:80:ab:f7:d1:22:
         8c:d0:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:14:02 2025 by rpki-client